Skip to content

Pam config fixes#4358

Merged
poettering merged 2 commits intosystemd:masterfrom
fsateler:pam-config
Oct 12, 2016
Merged

Pam config fixes#4358
poettering merged 2 commits intosystemd:masterfrom
fsateler:pam-config

Conversation

@fsateler
Copy link
Member

Add pam_unix account module to systemd-user pam snippet and enable skipping install of the same snippet.

Otherwise systemd-user@ fails because systemd validates the account

Fixes: systemd#4342
Copy link
Contributor

@martinpitt martinpitt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good in general, but the help string needs fixing. Thanks!

DISTRO_PORTING Outdated
/etc/security/limits.conf will not be read unless you load pam_limits.
Make sure you add modules your distro expects from user services.

Pass --with-pamconfdir=no to ./configure installing this file and
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

s/installing/to not install/ ?

#
# Used by systemd --user instances.

account required pam_unix.so
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If ew add pam_unix in for "account", shouldn't we also add it in for the others?

(i don't know want to suggest we should, I am just wondering this myself)

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

pam_unix(8) says:

The session component of this module logs when a user logins or leave the system.

Not very relevant for our purposes.

Also, I don't see why the password and auth modules are relevant. systemd --user has no way to ask the user for feedback (eg, change or input the password).

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ok

configure.ac Outdated
@@ -1510,6 +1510,7 @@ AC_ARG_WITH([pamconfdir],
AS_HELP_STRING([--with-pamconfdir=DIR], [Directory for PAM configuration]),
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

help text should be updated, i figure

@fsateler
Copy link
Member Author

Force pushed an updated version, except for adding the other module types for pam_unix

@poettering
Copy link
Member

lgtm

@poettering poettering merged commit 6612379 into systemd:master Oct 12, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants